##
|
# CAS Server Context Configuration
|
#
|
#嵌入tomcat容器
|
#server.context-path=/cas
|
#server.port=8443
|
#server.ssl.key-store=D:\\my.keystore
|
#server.ssl.key-store-password=changeit
|
#server.ssl.key-password=changeit
|
#server.max-http-header-size=2097152
|
#server.max-http-post-size=2097152
|
#server.use-forward-headers=true
|
|
# server.ssl.ciphers=
|
# server.ssl.client-auth=
|
# server.ssl.enabled=
|
# server.ssl.key-alias=
|
# server.ssl.key-store-provider=
|
# server.ssl.key-store-type=
|
# server.ssl.protocol=
|
# server.ssl.trust-store=
|
# server.ssl.trust-store-password=
|
# server.ssl.trust-store-provider=
|
# server.ssl.trust-store-type=
|
|
server.tomcat.basedir=build/tomcat
|
server.tomcat.accesslog.enabled=true
|
server.tomcat.accesslog.pattern=%t %a "%r" %s (%D ms)
|
server.tomcat.accesslog.suffix=.log
|
server.tomcat.max-threads=5
|
server.tomcat.port-header=X-Forwarded-Port
|
server.tomcat.protocol-header=X-Forwarded-Proto
|
server.tomcat.protocol-header-https-value=https
|
server.tomcat.remote-ip-header=X-FORWARDED-FOR
|
server.tomcat.uri-encoding=UTF-8
|
server.error.include-stacktrace=ALWAYS
|
|
spring.http.encoding.charset=UTF-8
|
spring.http.encoding.enabled=true
|
spring.http.encoding.force=true
|
|
##
|
# CAS Cloud Bus Configuration
|
#
|
spring.cloud.bus.enabled=false
|
# spring.cloud.bus.refresh.enabled=true
|
# spring.cloud.bus.env.enabled=true
|
# spring.cloud.bus.destination=CasCloudBus
|
# spring.cloud.bus.ack.enabled=true
|
|
endpoints.enabled=true
|
endpoints.sensitive=true
|
management.context-path=/status
|
endpoints.restart.enabled=false
|
endpoints.shutdown.enabled=false
|
|
|
##
|
# CAS Web Application Session Configuration
|
#
|
server.session.timeout=3600
|
server.session.cookie.http-only=true
|
server.session.tracking-modes=COOKIE
|
|
##
|
# CAS Thymeleaf View Configuration
|
#
|
spring.thymeleaf.encoding=UTF-8
|
spring.thymeleaf.cache=false
|
spring.thymeleaf.mode=HTML
|
|
#cas.view.defaultRedirectUrl=http://portal.nmsmp.com:8088/，http://127.0.0.1:8085/login/loginChoose.html
|
cas.view.defaultRedirectUrl=http://192.168.20.106:8082/
|
##
|
# CAS Log4j Configuration
|
#
|
#logging.config=file:/etc/cas/config/log4j2.xml # D:/etc/cas/log4j2.xml
|
#server.context-parameters.isLog4jAutoInitializationDisabled=true
|
|
##
|
# CAS AspectJ Configuration
|
#
|
spring.aop.auto=true
|
spring.aop.proxy-target-class=true
|
cas.tgc.secure:false
|
cas.warningCookie.secure:false
|
##
|
# CAS Authentication Credentials
|
#
|
#cas.authn.accept.users=landtool::123456
|
cas.authn.accept.users=
|
#database connection credentials
|
#cas.authn.jdbc.query[0].sql=SELECT LOWER(REVERSE(U_PASSWORD)) as psw FROM ORG_USER WHERE U_LOGINNAME=?
|
#cas.authn.jdbc.query[0].healthQuery=SELECT 1 FROM hydg.ORG_USER
|
#cas.authn.jdbc.query[0].isolateInternalQueries=false
|
#cas.authn.jdbc.query[0].url=jdbc:oracle:thin:@10.1.4.29:1521/pdbgjhy
|
#cas.authn.jdbc.query[0].failFast=true
|
#cas.authn.jdbc.query[0].isolationLevelName=ISOLATION_READ_COMMITTED
|
#cas.authn.jdbc.query[0].dialect=org.hibernate.dialect.OracleDialect
|
#cas.authn.jdbc.query[0].leakThreshold=10
|
#cas.authn.jdbc.query[0].propagationBehaviorName=PROPAGATION_REQUIRED
|
#cas.authn.jdbc.query[0].batchSize=1
|
#cas.authn.jdbc.query[0].user=hydg
|
#cas.authn.jdbc.query[0].ddlAuto=create-drop
|
#cas.authn.jdbc.query[0].maxAgeDays=180
|
#cas.authn.jdbc.query[0].password=hydg163
|
#cas.authn.jdbc.query[0].autocommit=false
|
#cas.authn.jdbc.query[0].driverClass=oracle.jdbc.OracleDriver
|
#cas.authn.jdbc.query[0].idleTimeout=5000
|
#cas.authn.jdbc.query[0].credentialCriteria=
|
#cas.authn.jdbc.query[0].passwordEncoder.type=DEFAULT
|
#cas.authn.jdbc.query[0].passwordEncoder.characterEncoding=UTF-8
|
#cas.authn.jdbc.query[0].passwordEncoder.encodingAlgorithm=MD5
|
|
cas.httpWebRequest.header.hsts=false
|
cas.httpWebRequest.header.xframe=false
|
# cas.httpWebRequest.header.xss=false
|
# cas.httpWebRequest.header.xcontent=false
|
# cas.httpWebRequest.header.cache=false
|
|
cas.httpWebRequest.cors.enabled=true
|
#cas.httpWebRequest.cors.allowCredentials=false
|
cas.httpWebRequest.cors.allowOrigins[0]=*
|
cas.httpWebRequest.cors.allowMethods[0]=*
|
cas.httpWebRequest.cors.allowHeaders[0]=*
|
#cas.httpWebRequest.cors.maxAge=3600
|
|
# cas.httpWebRequest.web.forceEncoding=true
|
# cas.httpWebRequest.web.encoding=UTF-8
|
|
# cas.httpWebRequest.allowMultiValueParameters=false
|
# cas.httpWebRequest.onlyPostParams=username,password
|
cas.httpWebRequest.paramsToCheck=ticket,service,renew,gateway,warn,method,target,SAMLart,pgtUrl,pgt,pgtId,pgtIou,targetService,entityId,token
|
|
# 启用单点登出后的servcie跳转
|
cas.logout.followServiceRedirects: true
|
